explaining the COOKIE_DOMAIN better