removed UserSigninToken; remember-me functionality now uses default token interface