section 8.2.1 - added remember token attribute required to impl SessionsController.sign_in