how to enforce app check on firebase