added remember me, see TODO about strong params in User model