This looks like it checks the wrong thing, i.e. it's checking `cookie.path` but the error message will say `cookie.name`.  Both of these need to match.  Looking at the protocol we should only be checking for `name` and `value`