* Always verify domain name. No user overwrite
* Support roster pre authentication