well, i'm not a real expert...
I know that facebook need the app to be in https.
If the user is in https and you app is in http.
it ask the user if he wants to go in http. and I don't want that.
So, i needed to have the ajax call in https too.
where do you put the "header" thing ?
And what does it means, or do ?
thx for the answer !