same_origin? returns false for bad URIs