Function path_covers 

pub fn path_covers(cookie_path: &str, request_path: &str) -> bool

Whether a cookie scoped to cookie_path is sent by the browser on a request to request_path (RFC 6265 §5.1.4 path-match): an exact match, or cookie_path is a prefix ending at a / boundary. / (or empty) covers everything.

Interactive-login plugins use this to reject a session.cookie.path that would starve their OAuth callback of the session/flow cookie (which loops login forever).