added correct session domain and path handling