add remember_token to user