Yes it is for the session cookies. You are right that it won't work well for multiple frontend servers but that isn't going to be an issue for this current app. If it is written to the Heroku environment it should be available to all dynes I think.

I can rethink the solution if I need scale. I don't really think of it as config as I don't care what the value is just that it is consistent on any given host.