Authenticating devices with content servers