Add /auth/devices authenticated API