acceptance and unit test to ensure that cookies allow path does not end up in redirects