Use "Cookies domain" global setting.
Make `force_members_https` hook synchronous.