update security rules so you can create new objects