Cookie domain needs to be configurable, rather than constant.