Add deviceid, uid checking logic to session and refresh