AT&T says it’s fixed mobile Facebook problems now.  Pretty sloppy session identifier issues from the sound of it.  The average user will not understand this explanation, and AT&T and Facebook  both owe it to everyone to explain in detail how ridiculously easy it seems to have been for users to be able to access total strangers’ accounts.