new login behavior, now redirects to auth/facebook