#2: fixes cookie path