Remove lower() calls on username string

This fixes an issue where mixed-case usernames would fail to
authenticate, depending on the authentication backend in use.