add logic to force ssl on heroku