removed requirement to have session handler enabled to use remember me