Password- and domain-based authentication