user can be authenticated via facebook