John Gapper Facebook’s banks have to do some underwriting