heroku-deployed application not secure
The issue is https.
You have to force the files to be loaded via https on production.
Using php laravel, in your AppServiceProvider, add the following to the boot method
public function boot() { if ($this->app->environment('production')) { URL::forceScheme('https'); }}