raise an error if we are doing a Cross-Origin request

* We do not support it yet.
* See #9.