add fb login. add security rules.