Need to update the rules so that - logged in users can create new users (only really applies to creating themselves) - logged in users can read and update their own records