minor layout adjustments
ensure blank domain name is always tested (primarily for local users when only domain names are provided), test for bogus domain permission, minor code refactoring
added test for guest sessions