Client-side cross-window detection of session change