fixed scoping for device id and auth tokens