ensure device registration returns token
can log user in