fixed front firewall not allowing anonymous access
use facebook extended auth token