@jbuck caught that when behind the heroku proxy, req.secure will never show true. By adding `trust proxy`, we respect the `x-forwareded-proto` header.
@jbuck caught that when behind the heroku proxy, req.secure will never show true. By adding `trust proxy`, we respect the `x-forwareded-proto` header.

mozilla/advocacy.mozilla.org