added state parameter for FB.getLoginUrl
ask publish_actions seperately
output raw error if publish_actions fails
Merge pull request #38 from Thuzi/best-practices

separate read/publish permissions and state in getLoginUrl