refs #3 Move everything into a client class and use device token auth