Add support for Facebook appsecret_proof

Re: Issue #62.

Note that I don't love hard-coding the hash in the tests - open to suggestions there.