"disrupted a learning environment" yeah, like how?
That's such bullstuff, I would've refused in the first place to hand it over. It also breaks the agreement you create with Facebook in making an account, you aren't allowed to share your password at all. If it was publicly posted I would understand the school taking notice in any posts, messages, etc. that were made public.