UPDATE ON THE PROBLEM:
I would simply expire the cookie from /folder. This should leave you with only one session cookie for /
/folder
/
setcookie('PHPSESSID', '', time() - 86400, '/folder/');