given the importance of SSO, we might want to do validation here first, using `domain.split(" ").filter(function(url) { return isActuallyURL(url); })`