Used proxy.php to send cross domain requests:
- prevent access_tokens leakage and make them easy to update
- can use apis, such as linked-in and renren, which are not support callback