added facebook authentication as a policy