new visit code (and device logs update to check username too if user_id doesn't match)