better user validation with facebook's user id