create settings.php to protect facebook api key