Look for list of domains in get_document_or_404

http://manage.dimagi.com/default.asp?146548

Tested editing my own web user and the web user of a domain i was not in.
yeah. also would be great to add a few tests for this function (it's very testable)