I’m using a third party service called Prismatic to handle our Oauth flow/ credential management for our app. Their URL to handle the code exchange is “https://oauth2.prismatic.io/callback” and my app domain is app.frontrace.com. Things like my privacy and terms URLs are located at frontrace.com along with the marketing site. How can I validate these domains? The UI only allows one domain.