fb oauth works. local users persist to db