added permission request for email

the application will trigger an error is this is not added here, since you won't have access to user's email in passport's facebook strategy.