Facebook auth support.

- adds Facebook as a valid 3rd-party auth provider
- moves some moderately janky JS-based logging to the server-side
- maintains integrity of current login-based logging for both old and new 3rd-party-auth flows
I think using a session variable for this is fine; I'm not sure it merits creating an extra column in the database.