let users sign in with facebook

I think this should be `get_access_token`