initial bdb implementation; facade by topmost assigned domain, since cookies can apply to subdomains