Updated to use authorized_response approach for Facebook