Users are authenticated despite the choice not to be remembered