Fix bug that disallow sign in even with empty domain blacklist