added instructions for facebook oauth

Let me know if anything else should be added.
We don't need to instantiate `@user` here.  CanCan does that for us with the call to `load_and_authorize_resource` above.