Authenticating against multiple domains in the same AD forest