More work on Facebook auth