[vhost] improve cross domain login not to be compromised by browser cache (final test by replacing former method )