The "redirect-to-https" setting:

Specifies whether or not to redirect http:// requests to https:// URIs. A value of 0 (the default) means not to redirect, 1 means to redirect only the /login page, and 2 means to always redirect.