Facebook bug coughs up user names and photos to anyone who asks