UserManager leaves upper case password upper