fixes for domainToken auth