Currently the signin flow gets the user management domain twice - once to ask them to confirm if they would like to sign into a managed account, and once to actually get and use the domain. We should cache the result.

(Neither checks occur for the majority of users - those from domains in kNonManagedDomainPatterns)