ISTWCMS-4094: Only send session cookies to the site that set them

Session cookies should have their path value set to the site path. This can be seen in the developer tools under Storage, Cookies.