In production, there is maybe not the same problem as in the develop environments. Where the domain contains an port `:5001`.
To set the correct domain for the cookie, we either omit the option completely, or we have to ensure a valid domain.