We are developing a web application that relies on an external authentication service, which sets cookies on the parent domain. For testing and development, we use a host alias of that domain to access the token. This setup requires HTTPS with a self...