Employers requesting Facebook passwords

How common is this? Is it legal? Is it wise for employers? If legal, will the law change? How should one respond to such a request?...