fixed url_fors and facebook auth