install dev dependencies on Heroku
update package.json
make sure access policy is OK