added domain check for correct assignment of downloadURLs to identities