explicitly set the session cookie domain, so IE will be able to login