Subdomain constraits and authenticating by subdomain