[5.4] Do not touch the user timestamps when updating the remember_token.

[lucasmichot]

As discussed with @taylorotwell

It makes no sense to touch the updated_at field of the user when his remember_token is set or updated.

Note:

• \Illuminate\Foundation\Auth\ResetsPasswords::resetPassword : the password is modified too, so updated_at should be modified too.
• In order to have details about when users have logged in/out, https://github.com/antonioribeiro/tracker by @antonioribeiro does the job perfectly

---

Also see #16660 (comment)

[deefour]

$user = Auth::user();

Auth::logout();

$user->attribute = 'value';
$user->save();

Won't this prevent the explicit save above from causing updated_at to change too? Maybe restoring $timestamps from a temp variable after the save() in this PR would be better? Having the setting left as false seems an unexpected side-effect.

[lucasmichot]

Very good input @deefour : see acebc5a