OK, fixed this. The path in config.inc.php next to 'SESSION_PATH' was still set to the old value from before we moved the document root. I updated it and things are working fine now. I am not sure if this is worth filing a bug report about or if I just missed something or what.