fixed username case lookup

Updated to use lower case as usernames with regex characters in them could cheat the comparison