enforce https for every page

I haven’t tried this, but seems good
http://www.simonecarletti.com/blog/2011/05/configuring-rails-3-https-ssl/

http://collectiveidea.com/blog/archives/2010/11/29/ssl-with-rails/