2.6 - authenticating by subdomain