Even if the webserver had https disabled, the user would still get redirected to an https url when attemting to login.