We may as well test with `.toLowerCase()` on the hash too, so it's clear we're testing for case insensitivity. Otherwise if crypto ever started returning uppercase hashes or something, the test would be misleading.