Set and use remember token instead of user id in session