Make sure your AppServiceProvider.php file has a boot function that looks like this to avoid the was not allowed to run insecure content error in production:
use Illuminate\Support\Facades\URL;
/**
* Bootstrap any application services.
*
* @return void
*/
public function boot()
{
if (config('app.env') === 'production') {
URL::forceScheme('https');
}
}