Disallow top level domains in Cookie::validateCookieDomain().