It's turned on by default. To turn it off, add to candlepin.conf:
sslauth.filter.class=org.fedoraproject.candlepin.servlet.filter.auth.PassThroughAuthenticationFilter
and you should be set!
-d