fbapi works for sessions. access to friends list