title: What are the security risks in exposing facebook user access token in javascript?
body: <p>Suppose that my application has an access token to some facebook user.
  Is there a security risk in exposing this access token in JS Code to some other users which visit my site? If so, what can they do with it?</p>