setup user login with remember_token