Subdomains and CSRF Tokens

Does this thread help?