clarify that verification messages aren't case sensitive