Improve remember token logins

* Don't allow blank remember_token (Fixes #333)
* Add validation of remember_token to avoid blanks
* Rename `denies_controller_spec.rb` -> `permissions_controller_spec.rb`