* If user has remember-me cookie, don't timeout