I mostly added this while debugging. Just want to make sure we want to keep it.

Also, we don't want to call cookie.setDomain(), right? Just let it default to our own domain?