using session for fb_redirect_uri