if (!in_array($this->action,$this->Security->requireSecure) and env('HTTPS'))
    $this->_unforceSSL();

function _unforceSSL() {
    $this->redirect('http://' . $_SERVER['SERVER_NAME'] . $this->here);
}