SSH Gateway support

Also, refactor out the DOMAIN. For the near future, we should probably be using
hcs.so, but eventually we'll want to switch to hcs.harvard.edu when we put this
in production.