Rails:force`ssl: force non ssl

application_controller.rb

class << self
    def force_ssl(options = {})
      host = options.delete(:host)
      before_filter(options) do
        if !request.ssl?
          redirect_options = {:protocol => 'https://', :host => request.host, :status => :moved_permanently}
          redirect_options.merge!(:host => host) if host
          redirect_to "#{redirect_options[:protocol]}#{redirect_options[:host]}#{request.fullpath}", :status => redirect_options[:status]
        end
      end
    end
  end