Restrict session cookie to the relative path if set.

Ref: https://github.com/jrmithdobbs/gitlabhq/commit/2c2f1e31856a4decdae469974f5bea8245316f7e