filter cases in the wrong domain from OTA restores.

this is basically just tests with a one line change to set the domain
properly on the user object during sync