fixup! use sessionStorage when rememberMe === false