debugging Cross-site Request Forgery facebook/IE problem - 3