Facebook login makes security quick and easy, and no Facebook permissions are asked for.

Please don't. There are other ways to archive this, simple username and password using passport middleware for example. Forcing to connect to facebook just for a security manner seems lazy.

Great app and great idea. Love how simple it is.