Validation function instead of hook_user

I rewrote the check for domain access by using a validation function instead of the current hook_user. advantage of this is that it gives a form error instead.

the patch is created based on the last 1.1 version