This seems to be caused by the redirect from facebook secure (https) to non-secure looping instead of passing the request on. Since the loop concatenates the url each time it eventually errors out and facebook won't let the user try again for a while. It would be nice if we could skip the redirect entirely

see
http://developers.facebook.com/blog/post/452/