Custom login url can't switch back

WordPress is installed in a subdirectory, exactly.

The wordpress_user_sw_olduser_ does get set, the path is /. There is no wordpress_user_sw_secure_ cookie. There is a wordpress_user_sw_ cookie in admin and its path is set to /wp/.

It’s either http or https on admin and frontend. I checked both though and it does not make a difference if it is http or https. I still think that it is a problem with a custom login url and WordPress installed in a subdirectory, since it is working when I manually change the url to include the full path to wp-login.php,

So here is a summed-up version of the problem:

The wordpress_user_sw_secure_ or wordpress_user_sw_ cookie is only valid for the WordPress directory. Since my wp-login.php is in the wp directory of my site AND I changed my login url from /wp/wp-login.php to /login the cookie is not there.

Changing SITECOOKIEPATH to COOKIEPATH for $auth_cookie_name fixes this. Do you see a problem in changing this? Security- or otherwise?

My – hopefully temporary – workaround looks like this:

add_action('wp_die_handler', function($handler) {
	parse_str($_SERVER['QUERY_STRING'], $query);
	if ($_SERVER['SCRIPT_FILENAME'] === ABSPATH . 'wp-login.php' && $query['action'] === 'switch_to_olduser') {
		wp_redirect(get_bloginfo('wpurl') . $_SERVER['REQUEST_URI']);
		exit;
	}

	return $handler;
});

So it hooks into the wp_die_handler, checks the requested php file and if the action is switching back to the old user. If yes it redirects to the ‘full’ wp-login.php (where the cookie is present).