Hatchbox will setup your application to respond to both HTTP and HTTPS requests.
It is your application's responsibility to handle redirecting to HTTPS if you would like. We do not force users to use SSL because there may be situations where your site needs to be accessible on HTTP.
In your config/environments/production.rb, add the following config:
config.force_ssl = true
Check the protocol for "http://" and redirect to the current URL using "https://" instead.