We actually need to set the path, otherwise the cookie doesn't seem to work.

We don't need to call setDomain, as the default is good.