Firebase security check for flag update

This should print out a permission denied message in the JS console,
due to the Firebase security rules set on our firebase.