when you follow the epel tree, you cannot upgrade core as wanted, except if you modify in the /etc/e-smith/templates/etc/wordpress/wp-config.php/20inc_dist
/**
* See http://make.wordpress.org/core/2013/10/25/the-definitive-guide-to-disabling-auto-updates-in-wordpress-3-7
*/
/* Disable all file change, as RPM base installation are read-only */
define('DISALLOW_FILE_MODS', false);
/* Disable automatic updater, in case you want to allow
above FILE_MODS for plugins, themes, ... */
define('AUTOMATIC_UPDATER_DISABLED', true);
/* Core update is always disabled, WP_AUTO_UPDATE_CORE value is ignore */
you should compare with a clean wep app installation and find the correct values....by the way if you want to remove the https, all login and passwords will be sent in a clear way....the nsa and uncle sam will be happy