devices are updated after auth