add better security cookie support

the security cookie is et to the root (/) path
in order to guarantee its usage accross multiple
applications