downgrading omniauth-facebook
upgrade omniauth-facebook to 1.6.0
csrf detected omniauth-facebook error all over again
cleanup Project#show: redirect_to and return