use COOKIE_SCOPE env for current_tenant cookie