Set path correctly. Do not use setHttpOnly() for now.