More stuff works now

1. Create groups with name and contacts with autocompletion using tokens
2. Message list implementation

updated security.rules and also provided a sample users.json to establish the contact relationship