Facebook and ECO Logings

[wvdvegt]

iOS 8/9 add a new type of restriction for which permission is necessary. Plain text http:// protocol is no longer enabled by default and an exception need to be added for each domain accessed. The apps plist file has almost doubled in size and basically says insecure is fine!

Better is to switch the url to using ssl ie https://
For this the server info on oauth has to be changed.
Changing the offending http:// redirect urls on the client doesn't work and results in oauth failures.