No longer requiring a CSRF token for API calls.
Refreshing logged-in user data via the Graph API automatically when the app loads.