Facebook has 'tentatively' concluded that spammers, not foreign agents, are to blame for the biggest hack in its history