The "redirect-to-https" setting:

Specifies whether or not to redirect http:// requests to
https:// URIs. A value of 0 (the default) means not to
redirect, 1 means to redirect only the /login page, and 2
means to always redirect.