let users sign in with facebook

you aren't going to want to hit facebook's servers for every single request. You should save the `facebook_id` in the session, and look users up by that