Not sure if ROOT_DOMAIN is descriptive enough - maybe COOKIE_DOMAIN or SESSION_DOMAIN?