feat(firebase): add firebase security rules to app

[jeffbcross]

I could re-use most of the rules from the example app I created: https://github.com/jeffbcross/qa-app-demo/blob/master/security-rules.json