added remember_token for permanent sign-in