fixing sessions to work with heroku domain