separated facebook auth into separate controller