added cross origin capabilities to 'auth/facebook'