playing with fb user authentication