+ plug for end-to-end authorization.
Option 2. The city is a separate "column" is arbitrary record type
+ plug for their removal to a subdomain.
This is the most simple, and certainly not the only options, but it won't be easy even with these it is exact.