do not regenerate remember-token when login