Facebook's investigation into September's login token attack found hackers stole details for 29 million users. How serious is this data breach and what can users do about it?