require ssl without apache on localhost

application_controller.rb

def require_ssl
  if request.protocol != SECURE_PROTOCOL
    redirect_to :protocol => SECURE_PROTOCOL
  else # development or test
    logger.info "redirected to ssl"
  end
end

development.rb

SECURE_PROTOCOL = 'http://' # this will be HTTPS for staging/prod

production.rb

SECURE_PROTOCOL = 'https://' # This will be HTTP for dev/test

staging.rb

SECURE_PROTOCOL = 'https://' # This will be HTTP for dev/test

test.rb

SECURE_PROTOCOL = 'http://' # This will be HTTP for dev/test

Subsequently, your internal page links that should switch to HTTPS can use the SECURE_PROTOCOL instead of 'https://' directly