Security of Mobile Single Sign-On: A Rational Reconstruction of Facebook Login Solution