Dont store SmartThings device URLs in State variable, as it will soon be exposed to the client.  The device URLs included auth tokens that should be kept (reasonably) secure.