users sign in using facebook

you should put .env in your .gitignore so that I can't see your secrets