Fix #1977 "FB user rejected if role matches but app is `*`"