Device data end-point now authenticates for logged in user.

Also, checks if the user has access rights to the device. If not, no data can be queried.