How does Firebase handle cross origin issues, and what are the underlying security concerns and how are they handled?