Host-Only vs Domain Cookies in CloudFront Authentication

What we learned while building the WordPress Static Site Guardian