check current session against top-level domain cookie