using scoring.setUser() so we don't have to pass user all over the place, there's probably a better approach -- revisit
drumrole - functioning facebook auth!!