protected function _construct() { parent::_construct(); // CSRF protection $this->_customerSession->setFacebookCsrf($csrf = md5(uniqid(rand(), true))); $this->_clientFacebook->setState($csrf); }