Added fb userid qutoting

Quoted the fb userid so that malicious client calls can't hijack the url
for the graph api we're trying to call.