update security rules, put facebook users in different location