Manual:$wgSecureLoginDefaultHTTPS/de-formal

Details
By default, keep users logged in via HTTPS when  is also true. Users opt-out of HTTPS when they login by de-selecting the checkbox.