Write display param to session and pass it to facebook

This will allow clients to pass a `display=page|popup|touch` parameter to the `/login/facebook` route