Actually return 404s for bad device IDs