Added option allow_subdomain

#### Features
Allows subdomain to match the domain of the redirect_uri

#### Notes
Can be greatly improved - for security matters.
We should have a separate field that contains allowed domains.
For the meantime, and for our usage, this should be sufficient.

Not sure 'include?' is the right method, we should ensure the top domain is the right one.