Manual:$wgSecureLogin

Details
Whether to let user authenticate using https when they come from http. Based on an idea by George Herbert on wikitech-l:wikitech-l/2010-October/050071.html