Facebook turns to users to help combat phishing