csrf detected omniauth-facebook error all over again
cleanup Project#show: redirect_to and return