Authenticating an IoT device