title: How to avoid sending auth-token cookie to CDN-hosted site?
body: <p>I'd like to avoid sending my authentication-token cookie to CDN-hosted site.</p>
  
  <p>The static contents of the site (www.example.com) are served by the CDN. The site makes ajax calls to api.example.com -- all ajax requests to the api.example.com must receive the authtoken cookie.</p>
  
  <p><strong>What works:</strong>
  If api.example.com sets the auth-cookie to ".example.com" domain, ajax requests work, but the cookie is also send to CDN-hosted resources (www.example.com), which is undesired.</p>
  
  <p><strong>What doesn't work:</strong> If api.example.com sets the auth-cookie to ".api.example.com" domain, subsequent ajax requests are missing the cookie, presumably because of Same-Origin-Policy?</p>
  
  <p>So, is it possible to avoid sending the auth-cookie with every request to www.example.com, and only to api.example.com?</p>