cookie strategy: set cookie for all domains