Skip same domain check on registration, login and security.CheckUser()

[mytja]

Add a flag and a env variable that does that --skip-samedomain-check