Force SSL for a particular action

force_ssl.rb

class SessionController

  before_filter :force_ssl, :only => :create

  # login
  def new
  end

  # login
  def create
  end

  private

    def force_ssl
      if !request.ssl?
        redirect_to :protocol => 'https'
      end
    end

end