Added remember_me to attr_accessible for users. Code would fail on incorrect password