client: Detect cross-origin requests

Ah good point