Manual:$wgSecureLoginDefaultHTTPS

Details
By default, keep users logged in via HTTPS when   is also true.

Users opt-out of HTTPS when they login by de-selecting the checkbox.