Fix remember me token tests

They now correctly check that the TTL of a token is reduced to 5
minutes, and the token allocator now returns 'undef' for user names
that don't exist.