Enter the app password. This is not a Facebook-password form. Log into Facebook only inside the remote browser after Connect.
Only use the public app through HTTPS. Local HTTP requires the explicit development switch.