ssl usage and forced redirect

[blaskovicz]

heroku has free ssl now, so we should be only using that