Exclude /api/v1/login/facebook from CSRF protection
Don't login as another user if user already logged in
Add comment on why we check current user
Merge pull request #100 from UWFlow/david-exclude-api-login-from-csrf

Exclude /api/v1/login/facebook from CSRF protection