better input validation on audience.  accept even more forms of input (domain:port) and do the best we can to validate.  closes #642