This is the way browsers work. A different domain will have different cookies and therefor different sessions. The only solution is to always use one type of link... either always include the www or always don't... then add some domain checking on top of the page to make sure to correct the domain if it is entered differently.