Do not ignore DeviceInfo if 'id' is not set

Some services (e.g. smtp auth) don't provide us with a device ID.
Ignoring the rest of the information, such as the IP, prevents ratelimits
and blacklists from working.