Ensure cookie path is set for the session cookie

Fixes #653