Got rid of force_authentication_deviceready(), because Drupal.user isn't ready at this point. Instead used force_authentication_install() to save the original front page, then added force_authentication_services_request_pre_postprocess_alter() to properly watch for anonymous users.