basic facebook auth flow