add attribute remember_token for session controll