[toast0]

You can, but it's typical to use / for login cookies. And I don't think you can issue cookies that exclude a sub path.