Bug fix - SID cookie should be set on host, not domain wide