don't reset remember_me_token by default on login/logout