moved requirement on remember_me to verify