Make sure cargo deploys tomcat with emptySessionPath=false

default cargo deploys tomcat with emptySessionPath = true

However, we do want to have a separate session cookie for /site and /cms otherwise the site can log out the cms with session.invalidate