Just to clarify: since there isn't any domain checking, each domain should use it's own cookie-jar correct?