open api must use device id header