getting the domain via privileged contest instead username.