debugging Cross-site Request Forgery facebook/IE problem