Securing API with Firebase auth tokens.