this actually won't work very well because we can authenticate non google domains with this url.