for login use same firebase ref as models, update user variable to currentUser
checked in copy of security rules for deployment