Facebook Login Ignoring Authentication

Hi there,
First of all I can’t share my app - sorry. I have a facebook login plugin from bubble. I have set up all the credentials and I can login and display the FB first and last name. It is not the Graph API plugin.
I can sign up using facebook and it will create an entry in the User’s thing.
All well and good so far…

But, if I login with a bogus name and password, it will still login. I can’t seem to trap a bad login.

I can even login with bogus username and password.

My workflow is simple. Sign in/Sign up with FB oauth and then go to a page.

The facebook dev app is live.

Thoughts would be appreciated.