feat: cookies are set on the root path by default