Verify device id hash exists before saving location tracking updates

:bomb: SQL Injection :bomb: