Context (Double Submit Cookie and Subdomains):When using a CSRF token with a cookie for the Double Sub