Use cookies to store and lookup remember_token

* reduces extra user lookups when adding cookie to headers
* use the appropriate sign_out method in tests
* resolves issue #295