add: remember me feature
make the authentication optional
enable authentication on all the routes