Support for cookie paths

We needed the ability to limit the 'remember me' cookie to non-root paths. Werkzeug already supports that, so this seems like a natural addition.
`assertIn` would probably be more appropriate.