devicesummary endpoint returns 500 with API token, but works in browser

[LegendEvent]

The /devicesummary endpoint returns HTTP 500 when accessed via the SDK or direct API token authentication (requests), but works as expected in the browser or with curl when a session cookie is provided.

API token authentication: 500 Internal Server Error
Browser/curl with session cookie: full JSON response as expected

This suggests the endpoint may not support API token auth, or there is a backend bug.

Steps to reproduce:

1. Call /devicesummary?did=DEVICEIDNUMBER with valid API token: 500 error
2. Open same URL in browser (logged in): works)
3. Use curl with session cookie: works

Expected:
API token should work for this endpoint, or documentation should clarify limitations.