Bug fix: facebook jssdk permissions.

Should be "scope" and not "permissions".
Add token expired method to user class.
Remove display popup option in omniauth initializer.

Not really worth it.
Keep user as a "cookie" in the session.

Rather than storing them in a database. The single user object is
small enough to be kept in memory, like a cookie. Now we can remove
the database.
Remove user schema.

Remove database.
Fo facebook graph pull in session controller.

Really only ever want to do this right when a new user session is
created. So now the koala calls are in the session controller. The
user class has a location attribute, which is the only attribute not
set in the constructor -- it comes from facebook, not omniauth. The
friends hash is now a class variable of the application controller, of
which the session controller. The some helper methods allow this to be
set globally by the session controller and accessed in the application
view.