Fixed prototype persistence to singleton. Added CORS required header to authorize-with-facebook action result.