If you have multiple portals, you'll find that this probably is true only for Portal 0. If that is the case, you should be able to login as host on another portal. Then, go to Host Settings and uncheck the box that enables SSL.
If you have only one portal, you'll need to go into the Tabs table and set IsSecure to false for all of the pages.
A third option would be to restore your previous version, uncheck the box in Host Settings and do the upgrade again.
-----------
My understanding is that this happened because you had SSL Enabled checked in Host Settings when you did the upgrade, even though you're not using SSL. Version 4.9.0 believes you and sets the host and admin pages to be secure.