device_id used instead of user_id