For the login I completely understand but most pages don't need to be secured in my opinion.
Secure it all vs secure just the login...may as well do it all.
If you only secure the login you will be sending your session cookies unencrypted for the other pages and they can be intercepted and used to impersonate you.