follow the RFC and don't restrict the path attribute
Merge branch 'less-strict-cookie-matching'