allow users to login with facebook
operate directly off user
use user_serializer
add facebook profile images