add SSL in production
Update Gemfile.lock for Heroku