Add SSL in production
up to "prior to a post being saved"

http://www.logansbailey.com/2011/02/27/adding-authorization-using-devise
/