'secure' config setting configurable on heroku

This lets Heroku users configure the secure setting using the Heroku ENV variables