verify user against authorized email domains