Making a cookie accessible only from a specific domain or path