Add config to allow subdomain cookies