Fix the facebook fake auth

Also:
- Update the readme to describe patterns
- Provide base config.yml. Future changes people make locally still won't be picked up by git

@jault3 please review
I would prefer this entire file be excluded. I've had a few experiences where access keys and all that have been committed to a file that was in the repo that was up to the individual to maintain their own version. Usually goes that they add their own keys, then one day notice that have uncommitted changes and will just push them.