Separate device and client (OAuth)