allow apps to define cookie domain