How to restrict users to login to other domains?