Allow explicit auth cookie domain setting.

This builds on (and includes) the commit from #1072.

In some situations any standard rules for cookies do not apply and the only alternative is to hardcode the domain used for cookies. This pull request makes that possible by adding a new ``domain`` option to AuthTktAuthenticationPolicy.