Refactoring cleanup still around variables, constants of CORS and OPTIONS methods
Removed facebook access token creation, because that doesn't belong to the API. That is client specific code.
authenticated helper set to use futures, all controllers are now using Action.async