Be more clear about logging invalid key
Don't try requests if there are none
Log device name with identified user