everyauth facebook authentication and sql user storage. works fine, but sensitive data in session cookie is a no no.