I think the domain :all was resulting in a different cookie per subdomain
I think the domain :all was resulting in a different cookie per subdomain

This was resulting in a csrf issue

ScienceCommons/api,ScienceCommons/api,ScienceCommons/api,ScienceCommons/api