Facebook has found that millions of user passwords were being accessed internally via a plain text document without adequate protection.