yes, my bad... It does not make difference here since we allow only ascii characteres for username, but the correct way is to do lower first.