Don't FB auth on HEAD requests