How can I retrieve the access token via the Facebook Strategy, is it not exposed somehow?
Yup. It is stored in the session as 'access_token' however this is actually an error and it should be accessible via the getAuthDetails helper method. For now that session variable should work for you?
Yes that works for now