moved session remember token underneath if user.save