Set default cookie path to webroot instead of base.

Refs #5404
Merge pull request #5409 from ADmad/3.0-cookie-path

Set default cookie path to webroot instead of base.