I re-opened https://issues.jboss.org/browse/GTNPORTAL-1758. Any objections to having empty path for session cookies on tomcat7 ? It's needed to help secure the silly gwtGadget :). We recently added this ability in as7 and it was configured for as5 awhile back [1]. You can achieve this now through servlet 3.0 web.xml, however it was decided for as7 to have it server wide.

- Nick

[1] https://issues.jboss.org/browse/GTNPORTAL-1118