User: do not block bcrypt users from logging in with no salt

And use a case-insensitive login
ModuleChecker: removed debug output