Merge "don't honour domain verification for browsers" into oc-dev