Merge pull request #373 from ilanco/valid-redirect-fix

fix: validate state

Author: gfosco

src/Facebook/FacebookRedirectLoginHelper.php

@@ -174,7 +174,6 @@ public function getLogoutUrl(FacebookSession $session, $next)
    */
   public function getSessionFromRedirect()
   {
-    $this->loadState();
     if ($this->isValidRedirect()) {
       $params = array(
         'client_id' => FacebookSession::_getTargetAppId($this->appId),
@@ -203,7 +202,7 @@ public function getSessionFromRedirect()
    */
   protected function isValidRedirect()
   {
-    $savedState = $this->getCode();
+    $savedState = $this->loadState();
     if (!$this->getCode() || !isset($_GET['state'])) {
       return false;
     }