Don't modify the session on every request; only modify it when the remember cookie needs to be set