Add API details for device interactions.

Don't include an endpoint to list the devices, they can get the list
from just getting the authenticated user.