Multiple secure domains

I got two domains running, with different visual styles. Everything works fine, but I cannot get the second instance password protected through prosody. Any ideas?
It would be perfect if the second instance uses the same virtual host for authentication like the first virtual host does.
Now it is possible for everyone to create a meeting without any authentication on the second instance. The first instance is still working fine with internal hashed authentication.