Fix cookie path

From the RFC2109 (http://www.ietf.org/rfc/rfc2109.txt):

- path is not required, and if is provided it has to be a prefix of the requested URI