avoid explicitly assigning domain for cookie