adding config for default token lifetime and a rememberMe option