Fixed #2 and #3. Renamed authentication_token to device_uuid and removed devices/auth from the upload PII endpoint.