fixed username cookie path