Google authentication: limit to a domain

Adds a config value which allows a tenant admin to specify the domain
to which the authentication should be limited.

If this value is specified, the user will not be presented with the
account choser and be taking straight to the login view for that domain.