added Facebook authentication with OmniAuth and own callback requesting email and password only