vt-social/app/policies/domain_allow_policy.rb