You can also manually change the URL to https, without logging in. A redirect would be good practice.