fixed domain restrictions link on security page