remove domain option when setting cookie for user auth token