add domain param, then sites with the same domain can share the session