SEC-2165: remember-me@token-validity-seconds can be parameterized