so then in your api override function, you should just throw an error to the frontend in case the user's origin is incorrect