#22 - let setDomain for user token cookie if cookiedomain is not set (allow only same server) + simplify implementation in CookieManager.