cookie now tries to set reasonable `domain` value