Basic Firebase authentication.

Opted to avoid generating a secret each time to avoid dealing with
credential expiry until we really need reduced perms for the workers.

Auth appears to be async; do we need to wait for it?