Added option allow_subdomain

#### Features
Allows subdomain to match the domain of the redirect_uri

#### Notes
Can be greatly improved - for security matters.
We should have a separate field that contains allowed domains.
For the meantime, and for our usage, this should be sufficient.

Yeah, `include?` is not relevant here. I'm going to use a regex.