Improvements to Facebook login and some small CORS changes (#3).