Yes, that is possible. A period in front of the domain on that cookie headers is what tells browsers to send it on subdomains.
I'm not familiar with the way Django handles it, but hopefully this helps.
We're a place where coders share, stay up-to-date and grow their careers.
We strive for transparency and don't collect excess data.