add :remember_token to attr_accessible