Set the cookie path to be SITE_ROOT.

The cookie path was being set to SITE_ROOT, but too soon, before
SITE_ROOT was set in settings_local. Now it's set after we've loaded
settingS_local.