fix cookie path

apparently to get the cookie to work correctly, http only needed to
be set