added device authentication