API only accepts "device=" during auth if using push
not passcode