Implement the remember me button

[ElysaSrc]

Without remember me checked:

• The refresh token should be signed for 1 day but the cookie containing it should not have any expiration date. Doing so, the browser will drop the session when closed.

With remember me checked:

• The refresh token token should be signed for 31 days and the cookie containing it should have the same expiration date.
• We should unlog the user if there is no activity from the user.
• We should not unlog an user that is active even if the token is coming to an end (grace period).
• We should handle the lifecycle within the refresh only, not within all checks.

[multun]

Implemented by #35