Add domain field to cookie with prefixed '.'

- [ ] Ready to merge
This fixes the redirect, but locally login isn't working, this seems to be
an issue with which cookie the session reads from