api now queries facebook with access token from header 'fbAccessToken' no vaidation occurs yet