Added domain for tag-based bucket querying

This way you don't query another app's bucket with "public" tokens