Added a check to make sure ssl is used on Heroku, added strict transport headers