feature 7 testing subdomain authentication