Is it okay to query firestore through cloud functions (with express)? I am planning on adding an auth middleware to verify the id token, but I am still concerned since admin