use environment variables for facebook app id and secret