heroku settings.yml
Access-Control-Allow-Origin
dont log db