update production.rb for heroku
fix new session url