Verify domain relationship requirements

| |

important issue. the app servers need to be in the same subdomain as the login server (is this true? - lab can auth from metric, but does it really?