FB login via JS SDK now uses auth_nonce (closes #419)