Merge pull request #234 from datacite/remove_force_ssl

Disable force_ssl

Author: richardhallett

config/environments/production.rb

@@ -35,7 +35,8 @@
   # config.assume_ssl = true
 
   # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
-  config.force_ssl = true
+  # NOTE: DataCite specific: This should not be enabled unless infrastructure has changed, ssl is handled via the load balancer proxy
+  # config.force_ssl = true
 
   # Skip http-to-https redirect for the default health check endpoint.
   # config.ssl_options = { redirect: { exclude: ->(request) { request.path == "/up" } } }