Django remember-me functionality using a separate token