login supports auth token from fb