remember-me implementation with inmemory persistenttoken