Facebook exposes 'god mode' token that could siphon data