Use session instead of remember_tokens.

This allows us to avoid database writes.
Allow signing out.
Underline links.