HTTPS my website

I have a simple website and I want to make it secure for an integration with a partner. I'm looking for freelancer experienced with heroku to add SSL certificate and change my site to be all HTTPS. Here are the partner requirements: SSL must be configured to support only TLS version 1.0 or higher. TLS version 1.2 using AES 128 or higher with SHA-256 is recommended. Also, caching should be disabled on all SSL pages and all pages that contain sensitive data by using value no-cache and no-store instead of private in the Cache-Control header. In addition, need some help with a OAuth security with a third party. Once a user completes the OAuth login process, my app must store only the consumer key, consumer secret, access token, realmId/companyId, and access token secret and encrypt them. Encrypt the partner access token with a symmetric algorithm (3DES or AES). AES is preferred. Store my AES key in your app, in a separate configuration file. Decrypt it and store it in the user session for use (transiently, so it does not persist if the session is suspended or terminated). Last, need some consulting re: testing vulnerabilities to Cross Site Request Forgery, Cross Site Scripting, SQL Injection, XML Injection.