facebook authorization almost works