[GH-10] lowercase chatbot username
[GH-10] ensure user passwords are not leaked and always emit email hash
[GH-10] add user avatar to chat input
[GH-10] keep track of lobby users