limit course enrollment to users whose email matches the enrollment domain