Fixes Console issue #400

[Alevsk]

Previously cookie path was set to Path="/api", this was a performance
improvement to tell the browser to send the cookie only to request with
that prefix, however also consume endpoints on Path="/ws", since rfc6265
doesnt support multiple paths or regular expressions in the path field
of a cookie we are back to use Path="/" which means send the cookie to
all request under the current domain.

[cesnietor]

I'm not able to login in operator-ui:

│ 2020/11/18 20:05:02 session token internal data is malformed                        │
│ 2020/11/18 20:05:04 cipher: message authentication failed                           │
│ 2020/11/18 20:05:04 encrypted session token claims not in the right format          │
│ 2020/11/18 20:05:04 session token internal data is malformed 

[cesnietor]

I'm not able to login in operator-ui:

│ 2020/11/18 20:05:02 session token internal data is malformed                        │
│ 2020/11/18 20:05:04 cipher: message authentication failed                           │
│ 2020/11/18 20:05:04 encrypted session token claims not in the right format          │
│ 2020/11/18 20:05:04 session token internal data is malformed 

nvm, I was able to login

[cesnietor]

tested lgtm