Authenticating users in multiple domains in one forest