Facebook JS SDK does not need app secret to authenticate : How ...
stackoverflow.com
I'm looking into how secure the authentication is also - I think things have
changed since you asked this q, so perhaps this information was not ...