move facebook redirect into its own controller