[vhost] improve cross domain login not to be compromised by browser cache (preparation step for testing)