Session cookie applies to path /