With the recent adjustments to the Facebook API, if you don't have heightened publish_stream permission for your fb app, as the developer, you are now getting the message:
Invalid Scopes: publish_stream. This message is only shown to developers. Users of your app will ignore these permissions if present. Please read the documentation for valid permissions at:
https://developers.facebook.com/docs/facebook-login/permissions
And you are unable to login, as it invalidates the token. Where is the reference in the ES code to remove it requesting publish_stream access upon login?