Thanks for the clarification. It makes good sense.  

Could you describe in better detail, the way spring handles remember-me authentication? maybe we could take inspiration from there...links to a github repo, or a doc perhaps? at any rate, we should further discuss this on the list. would you mind starting that off?