always set remember_me field in login form

Doing this avoids getting into a sitaution where we have a valid AURSID
with a 0 expiration, and burp thinking that it isn't valid.

Should fix GH#15.