changed initializer to explicitly show facebook credentials.  security risk is minor at this point.