Updated README with Firebase access rules