Allow the domain of the FORMCRED and SMSESSION cookies to be configured

Both cookie default to the current hosts.