//incorrect domain: . 
//session ok