redirect_uri=apps.facebook.com doesn't count, also added restrictions to automateSSO.js so that it will only automate SSO in certain phases.