return new FacebookAuthenticationToken(userDetails.getAuthorities(),
token.getUserId(), token.getSessionKey());
case failure:
throw new BadCredentialsException("Log in failed - identity could not be verified");
case error:
throw new AuthenticationServiceException("Error message from server: " + token.getErrorMessage());
}
// unreachable
return null;
}