If the web domain is != mail domain, the session cookie is set to the wrong domain.
Please see the official documentation for instructions.