Do not wrap cookie_login in a transaction

'Remember me' tokens are handled by Redis, not a database, so
there's no need to be in a transaction.