#22 - let setDomain for user token cookie if cookiedomain is not set (allow only same server).