flash now added for dont displayed in the first request(render is not a request)
create remember token by digest sha1
sign_in method, remember token to cookie and digest token to db