futzing with facebook auth