[CyberMan]

Seems like using the mobile app on an android device (without cellular, like a tablet so there's no imei) should definitely login...What I would be curious about is does the cookie have the mac address of a device that's logged in before? If so, you can use a mac address changer to ensure that an email doesn't get sent to the account owner that a new device has logged into the account....