I haven't fully tested the hypothesis that duplicateproxy_cookie_pathdirective (or rather, the additional "off" value that is set by default) is what's causing the problem@fengerzhdescribes, so I will stop speculating here. I can just confirm that it doesn't work, unless you usenginx.ing...