title: Using https as standard with django project
body: <p>I am learning django and trying to complete my first webapp.</p>
  
  <p>I am using shopify api &amp; boilder plate (<a href="https://github.com/aorzh/shopify_django_app" rel="nofollow noreferrer">starter cod</a>e) and am having an issue with the final step of auth.</p>
  
  <p>Specifically, the redirect URL -- it's using HTTP:// when it should NOT and I don't know how to change it..</p>
  
  <pre><code>#in my view
  
  def authenticate(request):
  
      shop = request.GET.get('shop')
  
      print('shop:', shop)
      if shop:
          scope = settings.SHOPIFY_API_SCOPE
          redirect_uri = request.build_absolute_uri(reverse('shopify_app_finalize')) #try this with new store url?
          print('redirect url', redirect_uri) # this equals http://myherokuapp.com/login/finalize/
          permission_url = shopify.Session(shop.strip()).create_permission_url(scope, redirect_uri)
          return redirect(permission_url)
  
      return redirect(_return_address(request))
  </code></pre>
  
  <p>Which is a problem because my app uses the Embedded Shopify SDK which causes this error to occur at the point of this request
  <code>Refused to frame 'http://my.herokuapp.com/' because it violates the following Content Security Policy directive: "child-src 'self' https://* shopify-pos://*". Note that 'frame-src' was not explicitly set, so 'child-src' is used as a fallback.</code></p>
  
  <p>How do i change the URL to use HTTPS? </p>
  
  <p>Thank you so much in advance. Please let me know if I can share any other details but my code is practically identical to that <a href="https://github.com/aorzh/shopify_django_app" rel="nofollow noreferrer">starter code</a></p>