correctly split auth and service domain