can now authenticate users for their own subdomain