Manual:$wgSecureLoginDefaultHTTPS

Details
By default, keep users logged in via HTTPS when $wgSecureLogin is also true. Users opt-out of HTTPS when they login by de-selecting the checkbox.