auth without rememberMe