title: Facebook login Error. The "state" param from the URL and session do not match
body: <p>I have error while loging in to my app using facebook SDK.</p>
  
  <p>error says:
  <em>"Cross-site request forgery validation failed. The "state" param from the URL and session do not match".</em></p>
  
  <p>It's not about missing <code>session_start()</code> or double executed <code>getLoginUrl()</code> etc.</p>
  
  <p>I just conducted a test and found out that mine <code>.htaccess</code> is the problem.
  When <code>.htaccess</code> is on server FB login returns error. Without <code>.htaccess</code> it works just fine.</p>
  
  <pre><code>Options -Indexes
  RewriteEngine On
  RewriteBase /
  RewriteCond %{REQUEST_FILENAME} -s [OR]
  RewriteCond %{REQUEST_FILENAME} -l [OR]
  RewriteCond %{REQUEST_FILENAME} -d
  RewriteRule ^.*$ - [NC,L]
  RewriteRule ^.*$ index.php [NC,L]
  </code></pre>
  
  <p>What is wrong here?</p>