Agreed re lowercase, but I'm not sure if using nsIURL here would be much cleaner. `normalizePath` is called from `setCookie`, which, in turn, is called from `addCookiesFromHeader` at which point we don't have an `nsIURI` object. We could construct it, I suppose, from the contents of the cookie header, but I'm not sure that it's worth it just for getting a canonicalized path.