use device token as primary lookup rather than id