modified LOGGEDOUT cookie to use host instead of domain