Allow these API methods to be called by non-admins as well.

Restrict functionality when a non-admin calls to the current user's
devices only.