https://www.facebook.com/notes/facebook-engineering/secure-browsing-by-default/10151590414803920
It's no longer possible to not use HTTPS on Facebook (which is a good thing!).
You cannot do anything against blocked pop-ups except telling the user that there is a pop-up that might be blocked.