add crossdomain set-cookie