Devices now use a user's API key to access the API. Moved checks for the user being logged in to the project/profile lookup parameter to improve code reuse.
Added some TODO reminders for pagination.
Added some more profile tests to improve code coverage.