Facebook owns up to yet another security blunder