base url and cookie host