allow extra domain input for token authentication

No match.