It's turned on by default. To turn it off, add to candlepin.conf:

sslauth.filter.class=org.fedoraproject.candlepin.servlet.filter.auth.PassThroughAuthenticationFilter

and you should be set!
-d