Manual:$wgSecureLoginDefaultHTTPS

Details
By default, keep users logged in via HTTPS when   is also true. Users opt-out of HTTPS when they login by de-selecting the checkbox.