implement some kind of security mechanisms for api

[xrmx]

We should implement some mechanism to ensure that api calls are fullfilled only for devices and not for random clients on the network.

A decent first step could be:

• create a random string at device creation
• require api call from devices to pass that string