Set default cookie path to app's base path instead of "/".

This allows running multiple apps in subfolders under document root, without
interfering with each other or potentially other non-cake apps on same domain.
Not sure what you mean. The session object does't exist at this point. This config is passed to `Session::create()` which returns an instance of itself passing the same config to its constructor.