Facebook’s crazy Catch-22 lets imposters steal your identity