Facebook login create sessions

Sessions are created, and Action composition is used to authenticate requests.
doesn't complete, but moves #12 forward towards closure
closes #46 because it doesn't seem to be necessary for any types used yet


Next things to do:
- create the user object
- clean up the code
- address TODOs
- refactor code if necessary (#32, #33, #34)
- write tests