fix bug: cross-domain cookie