Can't help with why the cookies are treated differently, but a quick fix would be to use a different cookie name per sub-application rather than using the domain of the cookie.
In the case of Forms Authentication, change the name of the ASPXAUTH cookie.