add omniauth-facebook and checking access