Set cookie path to / to allow authentication to be stored for whole domain