I need to force SSL on all routes in my application except for message#new controller.
message#new
In config/environments/production.rb, I have:
config/environments/production.rb
skip_before_action :verify_authenticity_token force_ssl except: [:index,:create]
Its worked for me.