add path and domain options to create_cookie