popup fb auth and permissions