when I did that, the subdomains could not login, that's why I kept different. It threw a CORS error