added remember_token for session control