but, it should certainly not be mydomain - cause supertokens instance is not supposed to be exposed to the internet