fix: update session store configuration

- Change session cookie path from "/api" to "/"
- Remove HttpOnly flag

main.go

@@ -146,9 +146,8 @@ func main() {
 	// Initialize session store
 	store := cookie.NewStore([]byte(common.SessionSecret))
 	store.Options(sessions.Options{
-		Path:     "/api",
+		Path:   "/",
-		Secure:   false,
+		Secure: false,
-		HttpOnly: true,
 	})
 	server.Use(sessions.Sessions("session", store))