minecraft.net language redirects use HTTP if no cookies are set

The bug

When a minecraft.net URL without language (e.g. en-us) as part of the URL path is used, e.g. https://www.minecraft.net/does-not-exist, and no cookie for www.minecraft.net is set, the redirect uses an HTTP (instead of HTTPS) URL as destination.

Reproduction steps

1. In your browser delete all cookies for www.minecraft.net (or possibly even all *.minecraft.net cookies)

2. Open the developer tools of the browser

3. Open the tab for displaying network traffic

4. Try opening https://www.minecraft.net/does-not-exist

5. Look at the HTTP response
   ❌ The Location header used for the redirect uses HTTP, e.g. http://www.minecraft.net/de-de/does-not-exist