If you have an SSL setup for the websites domain, it should be enforced for the wordpress admin login, and all admin pages (typically because the site has the SSL because of ecommerce). Add this contant definition to wp-config.php to force SSL on login and admin pages.
define('FORCE_SSL_ADMIN', true);