Add webapp2_extras sessions

Now sessions can successfully bring fb user from login into homepage
and we technically finished the fb logout function
but I some how cannot delete the session info in logout handler
so the logout function still not totally finished.