domain restriction of login and size