added app secret
removed app-secret
REFACTOR: moving Facebook ID and Secret to environment variables