Do not lower case user supplied value

That value might legit need upper and lower case such as the state in an
oauth call.