Updated API for delegation token

We are using a unique phone identifier (see `Device` class), so it can't be specified. Should it be allowed? Don't think it is necessary.