sort of regretting the no-www choice because it causes full cookie submission to ALL subdomains. :(