I have a firebase project containing a few read and write APIs built with cloud functions that will be consumed by many different clients/websites without the need for authentic