User Endpoints GET /api/user/devices List active devices. DELETE /api/user/devices/:id Revoke device.