refactored auth and fb login to use application controller login method. Added check for Cross-site Request Forgery in Fb controller. Added some extra information to state variable for better error messages