avoid two devices with same token