Add a parent_domain option for auth_tkt policy

This change adds a new ``parent_domain`` option to ``AuthTktAuthenticationPolicy`` which sets the authentication cookie as a wildcard cookie on the parent domain. This is useful if you have multiple sites sharing the same domain.