rework of auth, introducing devices and pins