Set cookie path on server side.

Django appears to be naive about request cookies (not sure if it's django or
the way that cookies work in general). We need to explicitly set the path to
the referer, otherwise we end up with two cookies called "autosave_success."