Decouple validation from remember_me in authentication strategies

Closes #3118