Also watch lesson #3b
• Not Forcing SSL on localhost with express-...
Node.js #3 :
Forcing your Express.js application
on Heroku
to use HTTPS connection
with express-sslify
npm i express-sslify
const enforce = require('express-sslify');
app.use(enforce.HTTPS({ trustProtoHeader: true }));
before express.static