Skip authorization for users/create and user faceook login. Also, require a facebook_auth_token