Remove unused `cookieParser` and `session` middlewares
Attach `device` object from `isAuthorized` to request