create cookies on / root path

otherwise if you log in on `/user` you're not logged in on `/` and other urls.