Manual:$wgSecureLoginDefaultHTTPS/en

Details
By default, keep users logged in via HTTPS when  is also true. Users opt-out of HTTPS when they login by de-selecting the checkbox.