[server] Case-insensitive username and SHA256 salted passwords.

Old usernames are still case sensitive.