user fetch request, permission from user granted through fb