Fixed subdomain scope authentication