Allow explicit cookie domain setting.

This is useful as an escape hatch when dealing with enviroments where
no normal rules apply.
Merge pull request #1078 from wichert/auth-explicit-domain

Allow explicit auth cookie domain setting.