set x-subdomain cookies