more dev on cross domain cookies