Another shot at `cross_origin`