Rails 3 routes with SSL

development.rb

SSL_PROTOCOL = 'http'

routes.rb

SSL_PROTOCOL ||= 'https'

YourAppName::Application.routes.draw do

  constraints :protocol => SSL_PROTOCOL do
    # put your SSL routes here

    # resources :secrets
    # ... etc

    # redirect anything that did not match to http
    unless SSL_PROTOCOL == 'http'  # development
      match '(*path)', :to => redirect { |_,request| "http://#{request.host_with_port}#{request.fullpath}" }
    end
  end

  # put your non-SSL routes here

  # resources :monkeys
  # ... etc

  # redirect unmatched requests that should be https but came in as http to https
  # match 'secrets(/*path)', :to => redirect { |_, request| "https://#{request.host_with_port}#{request.fullpath}" }

end

I had to use 'http://' and 'https://' for the protocol constraints.

Use force_ssl now