working on firebase authorization