Small fixes to use sf guard and exclude subdomain