remember me, auth token included