set cookies for domains, not hosts

this change is aiming to finalize the support of cookies across sites that are part of the one domain