change sign_and_redirect(user) to sign_in(user) and redirect_to_back to keep after FB login on the same page