 <p>In the MIDDLEWARE_CLASSES of settings.py, you have <code>'django.middleware.security.SecurityMiddleware',</code>, which is new in Django 1.8. Either make sure Heroku is using Django 1.8, or remove that line from MIDDLEWARE_CLASSES.</p>