use device.id not session for commandFilter