+ code to inject org_id based on domain
 + added admin check based on login + injected org_id
 + added user check (whether login is available or not)