set cookie path to site root for sessions