Don't use SESSION_COOKIE_PARAM_DOMAIN

In my testing enviro `SESSION_COOKIE_PARAM_DOMAIN` was not defined, so my browser received this header:
```
Set-Cookie: ccmAuthUserHash=...; expires=...; path=/; domain=SESSION_COOKIE_PARAM_DOMAIN
```
Clearly a problem...