Is there a way to force nginx to log 400 errors? At least then I could debug this better. It's been difficult to find specific triggers. The one common trigger is that it only happens in a facebook connect iframe. We have a situation where two facebook connect iframes are loaded from our domain on the same page, and that triggers it around 80% of the time. My best guess at this point is that it's a bug with cookie headers.

chris