wrote basic facebook auth service, CORS issue