authenticate users with Facebook OAuth