Do not set cookie domain manually.
Add/delete "ssl" cookie only when needed.
Remove unnecessary code.
Revert "Use `env.extras.updateCookie` helper."

This reverts commit a397fe790a2a6a5f52d64771259a285226e4f6a1.
Add a comment.