facebook authentication reworked