fix liteauth_token domain handling

according to RFC6265 cookies are not port-specific in any way, and all references to ports should be removed from the Set-Cookie header.