title: how to prevent facebook authentication popup from saying I will receive user's friends list
body: <p>Facebook says to my users, during the app authentication popup, that I (my app) will receive the user's <code>friends list</code> </p>
  
  <blockquote>
    <p>[My app] will receive the following info: your public profile, <strong>friend
    list</strong>, email address and birthday.</p>
  </blockquote>
  
  <p>even though my login button is only:</p>
  
  <pre><code>&lt;fb:login-button scope="email,user_birthday"&gt;
  </code></pre>
  
  <p>The <a href="https://developers.facebook.com/docs/graph-api/reference/user/friends" rel="nofollow">documentation</a> says</p>
  
  <blockquote>
    <p>A user access token with <strong><code>user_friends</code></strong> permission is required to view the current person's friends.</p>
  </blockquote>
  
  <p>but I didn't ask for <strong><code>user_friends</code></strong>. How do I prevent it from saying "friend list" so as not to scare away my users?</p>