(1) bcrypt: not need the salt column, because the salt may by saved in the password column.
(2) if select remeable me, then the timeout option is invalid.
    if not select, the timeout is valid.