fix cookieDomain setting; https_mode for live sites