I think a good option would be a quick hyperlink between HTTP and HTTPS on the login page (or actually, maybe any page, if you put it down in the navbar area), for servers which have both HTTP and HTTPS support. I did it through MOTD.php on my system (http://mail.nbsd.org/), but it is more of a 10 line hack job than a real solution. - James