fixed fb auth url #_=_ and moved scripts out of <head>