An app developer has found a serious security hole within the mobile Facebook app that could lead to identity theft.