Fb auth


PR for issue #123 

I did some refactoring to avoid code duplication between the Persona auth and the facebook auth, and extracted some methods into rest/handler and rest/session_api.

There is a unit test, however because of a new submodule dependency I'm putting that in a different PR.