Can write to firebase with security rules enabled