default path must be '/' for cookies