ruby on rails - force_ssl in production.rb - how to override in controller to just be http -

in production.rb, have

  config.force_ssl = true 

and provide exceptions. looks should work (can't find how 3.2.19):

class apiitemscontroller < applicationcontroller    force_ssl except: :get_item_test 

but doesn't. i've seen rails 3.2 force_ssl except on landing page don't want adding gems such trivial thing. how work?

---

edit 1

you not able make specialized exceptions using config.force_ssl = true because rails uses rack-ssl, sets strict-transport-security header. don't want disable landing pages, anyway, google uses ranking signal.