added domain parameter to cookie for issue #296

lib/wsapi.js

@@ -103,6 +103,7 @@ exports.setup = function(options, app) {
       // IMPORTANT: we allow users to go 1 weeks on the same device
       // without entering their password again
       maxAge: config.get('authentication_duration_ms'),
+      domain: config.get('hostname'),
       secure: overSSL
     }
   });