Properly handle cookies that specify a sub-domain