switch over auth to firebase

[cch5ng]

ref to hackathon proj for links to docs

prefer email + google auth

only tricky item might be using the refresh token on BE auth in case of time out

[cch5ng]

resc

https://firebase.google.com/docs/auth/web/firebaseui?authuser=0

• incompatible with latest sdk for web

https://firebase.google.com/docs/auth/web/start?authuser=0

https://firebase.google.com/docs/auth/web/custom-auth?authuser=0

• logout

https://firebase.google.com/docs/web/setup?authuser=0

https://firebase.google.com/docs/auth/admin/verify-id-tokens

https://firebase.google.com/docs/auth/admin/manage-sessions?authuser=0#detect_id_token_revocation

https://firebase.google.com/docs/auth/web/auth-state-persistence?authuser=0

http://web.science.mq.edu.au/~mattr/courses/web_applications/9_Authentication/notes.html

https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html