Fix: Use case-insensitive email matching for login