Special handling of 'localhost' for the auth cookie.

This is my solution for running the app at `http://localhost`.  Without this change, the cookie is never created because "localhost" is apparently an invalid value for the cookie's domain (tested in Chrome latest and IE 10).  I can login to the app  without this change, but I'm forced to login again with every page refresh.