I don't think you will be disappointed with Kaminari, it extends the new query interface really nicely. As for CarrierWave, I find it a lot more flexible than Paperclip.

Also, I hadn't seen Rack SSL Enforcer, thanks for that!