fix domain checking when looking for idp session cookie.