cookies and session cookies now use the current routing's base href as the default path if possible (and not configured otherwise with session.cookie_path), and unless configured explicitely, of course. enjoy. closes #350