Shouldn't this method and the `_addCookies` verify the cookie `path` too?