force ssl for production

config/environments/production.rb

@@ -28,7 +28,7 @@ Lobsters::Application.configure do
   # config.action_dispatch.x_sendfile_header = 'X-Accel-Redirect' # for nginx
 
   # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
-  # config.force_ssl = true
+  config.force_ssl = true
 
   # See everything in the log (default is :info)
   # config.log_level = :debug

config/routes.rb

@@ -1,5 +1,5 @@
 Lobsters::Application.routes.draw do
-  root :to => "home#index"
+  root :to => "home#index", :protocol => "https://"
 
   get "/newest(.format)" => "home#newest"