tweak (web):  Removed username and password parameters that get sent to
the server when a brand new user logins in via facebook.  When it's a
brand new user and they're logging in via facebook, what is their LBB
user/pass?  We have to pick for them.  Up to this point, we were just
setting both their username and password = their email address.  We were
setting these values on the client and passing them to the server.

Now, we are not even passing username and password values from the
client.  Instead we are dynamically determining them on the server.