Set cookiepath to suburl

Set cookiepath to suburl instead of domain root so the cookie won't be sent to other applications running on the same domain.