"Login with Facebook" is a security vulnerability