[drinchev]

Using cookies with Domain option allows you to share a cookie between `api.site.com` and `www.site.com`.

You can combine that with a `Authentication Bearer` for releasing a public API access.