title: CSRF state token does not match one provided
body: <p>I know there are tons of post on stackoverflow about the issue on "CSRF state token does not match one provided." However, I tried and doesn't seem to solve the issue. Can you please take a look at my code below? Please tell me what you think and how to solve the problem. I have already updated to latest PHP SDK version.</p>
  
  <pre><code>&lt;?
  require_once ('src/facebook.php');
  require_once ('src/fbconfig.php');
  
  //Facebook Authentication part
  $user_id = $facebook-&gt;getUser();
  $loginUrl = $facebook-&gt;getLoginUrl(array(
      'scope' =&gt; 'publish_stream')
  );
  
  if ($user_id) {
      $_SESSION['user_id'] = $user_id;
      echo "&lt;script&gt;top.location.href = 'https://www.example.com/app-folder/welcome'&lt;/script&gt;"; 
      exit;
  } 
  ?&gt;
      .
      .
  &lt;body&gt;
  &lt;?php echo '&lt;a href="'.$loginUrl.'" target="_top"&gt;Please login&lt;/a&gt;'; ?&gt;
      .
      .
  &lt;/body&gt;
  </code></pre>