fixed cookie auth problem when accessing site without trailing slash