class ActionDispatch::SSL

def call(env)
  request = Request.new(env)
  if request.ssl?
    status, headers, body = @app.call(env)
    headers = hsts_headers.merge(headers)
    flag_cookies_as_secure!(headers)
    [status, headers, body]
  else
    redirect_to_https(request)
  end
end