force lowercase email and password
show wrong email/pass message when user not found