added conditions for facebook redirect url to be for local machine in developement and for heroku url in production
fixed bug that allowed users to log with different person's facebook access token
refactored unecessary code
moved secret keys into environment variables