add domain to CSRF cookie
updating services urls