Cross-site iframe cookie matrix

Each scenario is served from a separate registrable domain, so no scenario contaminates another.