Device can be created with null values in both fields serial_number and player_id.
Device can be updated without user relationship. If we does not want to update the device to new user, we do not need to contain user relationships in the request body.