@markstory To follow the [RFC 2109](http://www.ietf.org/rfc/rfc2109.txt) (section 4.3.1) the path should be the base path of the requested URL when not specified.

> Defaults to the path of the request URL that generated the
> Set-Cookie response, up to, but not including, the
> right-most /.