removed domain from cookies

src/main/java/edu/stanford/itlab/shibboleth/ClearIdpCookieServlet.java

@@ -19,7 +19,6 @@ public class ClearIdpCookieServlet extends HttpServlet {
     c.setMaxAge(0);
     c.setPath("/idp");
     c.setSecure(true);
-    c.setDomain(req.getServerName());
     res.addCookie(c);
   }
 

src/main/java/edu/stanford/itlab/shibboleth/SetX509CookieServlet.java

@@ -15,11 +15,11 @@ public class SetX509CookieServlet extends HttpServlet {
 
   @Override
   public void doGet(HttpServletRequest req, HttpServletResponse res) throws IOException {
+    System.out.println("Servlet " + this.getServletName() + req.getRequestURI());
     Cookie c = new Cookie("x509passthrough", "true");
     c.setMaxAge(86400 * 365 * 5);
-    c.setPath("/idp");
+    c.setPath("/");
     c.setSecure(true);
-    c.setDomain(req.getServerName());
     res.addCookie(c);
   }