remove domain field from response set-cookie headers