User auth with two separate domains in full trust