If cookie.domain is set to blah.com, and a redirect url is provided
as blah.com.my.custom.domain then vouch will reject it and not send
the user back to the incorrect domain.