support for maintaining session across subdomains