Lowercase emails before validating them

Email addresses are generally case-insensitive, so they should be compared in a case-agnostic form when checking identity.