Facebook login create sessions

Sessions are created, and Action composition is used to authenticate requests.
Next things to do:
- create the user object
- clean up the code
- address TODOs
- refactor code if necessary
- write tests