Add security-rules.json and move to www/
Commit new rules
ui-router works