Turns out there’s more reason than first thought to use Facebook over SSL.. If you haven’t already secure your sessions! ;-)