change user auth to use firebase ref rather than session variable from window wrapper