bu: omniauth, facebook strategy, reset credentials