is it worth memoizing the `remember_token` method? May not be much of win -- not sure what the implementation of `cookies` is.