fixes #4439 - ensure user logins are downcased at creation