Fix bug 1056414 - Put auth handler under a common /auth prefix
Fix bug 1056431 - Pass COOKIE_DOMAIN option to server