code: function issued(err, val) {
        if (err) { return self.error(err); }
        res.cookie(self._key, val, self._opts);
        return self.success(user, info);
      }
docs: The remember me cookie was valid and consumed.  For security reasons, the just-used token should have been invalidated by the application. A new token will be issued and set as the value of the remember me cookie.