Special handling of 'localhost' for the auth cookie.