update - additional security to Facebook SSO