removed unique requirement from device_id, it must be unique with the user
added logout to service
displaying user name
device is unique per-user
user status based on TosAcceptance