Adds Device model for device/user mapping
Adds device id property from headers and fixes register uri check
Updates Device model and fixes flow for User.create / User.verify
Removes duplicated 401 session check and adds http_session property