I find this measure ill conceived. It only protects from unlocked computers and sniffed session cookies. The right way to handle these two problems is to religiously lock your computer when you step away and to serve nothing on port 80 but a permanent redirect to port 443.

As spindritf pointed out, it merely serves to annoy (or worse, forces passwords to be transported via system clipboards which tends to increase the security risk).