Meta fixes a Facebook account takeover vulnerability