JSON, CROS, Firebase Functions Client, onRequest vs onCall, Authentication/User, Validation
using Google Cloud Functions