sanity check to avoid infinite refresh

funcky redirect on logout only when needed.
experimental feature to grant role at runtime.

by aangel, Dave Cohen: improved tab support by storing configuration data, default tab callback and hook_fb_tab.

by aangel, Dave Cohen: add parameter to event callback.  Otherwise, post-remove events have no way to know which application is removed.