session->path() returns a dir (not the session file)