device saving works with stolen token harhar