Associate device serial with session

[BeryJu]

authentik gives us a one-time challenge which we can respond to using a signed response with the device id/serial; this can be used to associate the device with the session