Fix Facebook support

Now token is grabbed directly by the server, and sent back by means of a cookie. This does unify token "creation" and renewal.