Accept access_token and deviceId from header in addition to cookie
Added reference to oauth login page customization package