handling facebook permissions