add option to set cookie path for SSO