auth in place, configuring rememberable