This is reproducible on Data Center: (yes)
Attempt to login to bitbucket over a HTTP connection
The login passes
The login fails ...
Set server.session.cookie.secure=false in the bitbucket properties file and restart.