Avoid touching the session unless something changed

Some session backends will try to detect changes made to the session
dictionary and only save if the session was modified. The pop() call
will set modified = True in such a backend. By checking if the
"remember" key exists before we pop it we avoid this behaviour.