Ensure callback url uses https when running through Heroku