correct setcookie url