[fix] expand the scope of session cookie to domains, to allow for authentication across sub-domains
[fix] expand the scope of session cookie to domains, to allow for authentication across sub-domains