spec remember token
finish sign-in sign-out