firebase based auth, incomplete