Added option allow_subdomain

#### Features
Allows subdomain to match the domain of the redirect_uri

#### Notes
Can be greatly improved - for security matters.
I checked on the facebook API, and they have a separate field that contains allowed domains.
For the meantime, and for our usage, this should be sufficient.