facebook reward changes

- link their facebook account if they haven't yet
- just update their facebook account auth token if they have