Not sure what the problem is. But I think it is the domain mapping.
When I login as the user firstname.lastname@example.org who is admin on kurs.xpand.no, and the person trys to go to Control Panel where is mislead to the mother site growdly.org.
This is an big problem.
The user himself have the same problem, and if I login into the account form my laptop it is the same.