don't forget to set the path on the cookie