Mike,
Yes, removing the API/Secret key from JomSocial was what needed to be done. The SCLogin module is the correct module, but before, on the JomSocial home page, there was a "Sign in with Facebook" button. That specific button was from JomSocial, not JFBConnect or our SCLogin module, and it was simply confusing the issue.
Glad it seems everything's going well. If you want to re-enable the redirects, feel free to try.. and if you run into trouble, just let us know!
Thanks,
Alex