Facebook is letting users tie a physical security key to their account as an added layer of security.