How I have hacked Facebook again and would have stolen a valid access token)

http://intothesymmetry.blogspot.ch/2014/04/oauth-2-how-i-have-hacked-facebook.html