added basic facebook login, no permission checks yet