added facebook auth
see devnotes