rest: Force downcase DNs

Fixes active service detection for SSO. We need move away from string comparing
DNs