Facebook grabs your site’s content by making an http request just like any other visitor, you’re forwarding any attempts to scrape your pages to the login page.
You could try checking for the Facebook user agent to let their crawlers through, but anyone could masquerade as the Facebook bot and browse your site without logging in by simply changing their browser’s user agent.