requiring at least anonymouse login to firebase