lock down the firebase dependencies until we are ready for the auth update