Set the session cookie domain from our config too, so sessions work.

There's a bug in flask where it unconditionally prepends a dot to the session
domain, which doesn't work when your server url is an IP address - like what
happens with most of our testing environments.