Facebook Inc. users in Illinois whose faces were scanned without their knowledge can sue the social-media company for damages that could amount to billions of dollars.