Implement device info database and anomaly detection
We need to store the most recently seen DeviceInfo objects for every user, and implement anomaly detection behavior based on that. The result will be an out-of-band (email?) warning when a user connects from a new (unknown) device.