Add domain field to cookie with prefixed '.'

- [ ] Ready to merge - closes #857 

This fixes the redirect, but locally login isn't working, this seems to be
an issue with which cookie the session reads from

- [x] Fix redirect
- [x] ~~Fix login~~
- [ ] confirm with tests (RS edited)

EDIT
It was old cookies that were affecting my login, when running in an incognito window it worked fine.
also when i signed out of jsbin.dev and cleared cookies everything worked fine.