function (user, context, callback) {
    // # checks if domain OR email address matches

    //authorized domains
    var whitelistDomains = ['futurice.com'];
    //authorized emails
    var whitelistEmails = [
      'palampinen@gmail.com',
      'futustoniatestuser@gmail.com'
    ];

    var domainHasAccess = whitelistDomains.some(
      function (domain) {
        var emailSplit = user.email.split('@');
        return emailSplit[emailSplit.length - 1].toLowerCase() === domain;
      });


    var emailHasAccess = whitelistEmails.some(
      function (email) {
        return email === user.email;
      });

    if (!domainHasAccess && !emailHasAccess) {
      return callback(new UnauthorizedError('Access denied.'));
    }

    return callback(null, user, context);
}