allow guest apps with mismatched domains, update lint styling