[server] Case-insensitive username and SHA256 salted passwrod.

Old usernames are still case sensitive.