[api login] some android device's secure id is only 15 chars long