authentications controller takes both user login and facebook login