make remember login token also dependent on password to protect against some...

make remember login token also dependent on password to protect against some brute force attacks on this token