Deploy to heroku without redirecting to localhost with passport callback
Did you add the callback URL to the app's settings? You have to add the site URL as that in the facebook developer app settings for it to allow facebook to make callbacks to any particular website.
Should be under either basic settings on site URL or advanced settings on "Valid OAuth redirect URIs"
(see also here)