Put facebook tokens into a config file, which will not appear publicly.