Added instructions ot set session_domain=top for cross-domain logins