Confused about cookie domain/trustedOrigins - Better Auth