Original in Italian: http://disse.cting.org/2013/07/17/facebook-oauth-token-hijac...