Updated signup to log in before creating users. Apparently createUser is supposed to log in the user that has just signed up, but it doesn't seem to be working because we get a "permission denied" error in the updated security model. I've added code to manually log the user in on signup and it works with the new security model.