handle cross domain openid in cookie