first attempt at real fb auth