added secure session via Facebook login