Look for list of domains in get_document_or_404

http://manage.dimagi.com/default.asp?146548

Tested editing my own web user and the web user of a domain i was not in.
Should I add tests now, or do we want to deploy sooner as it's a p2?