Add cross-domain check for forms