revert login change, add route for update device token