in application_controller.rb

before_filter :ensure_https
  
def ensure_https
  if Rails.env == "production" && !request.ssl?
    redirect_to "https://" + request.host + request.request_uri
    flash.keep
    return false
  end
end