Auth update

if domain is set, you can't logout