Support subdomain cookies

Cookies set for access by example.com should be accessible from test.example.com.