cleanup(session): improves docs and naming of remember me functionality

This documents how the Remember Me functionality works; adopts a clearer
naming convention for the data involved; explains where "code" means
either the token or the hashed token; removes ambiguity wherever possible
in function names/arguments; adds explicit function for hashing tokens.