set facebook app allowed urls in env