Kibana login with out ssl

i have a problem about kibana login。without ssl, i watched the /security/api/security/v1/login url retrun 200. but /app/kibana url is 302。 i see the kibana server log “upgrade_insecure_request:1”。is that meaning I have to use https from brower to kibana server ?

i use haproxy to proxy my kibana server。 i test directively access to kibana server ok。