Cookie now set by default on root path

This fixes the issue with users having to sign in for each HTML document separately.
Merged auth conflict