Your Facebook password should never pass through Kinja’s server. They should be using OAuth or a similar scheme that gives Kinja a token for your account which is limited to what the outside app is authorized to do, not your actual password to allow carte blanche access to view, change, or post anything they want.