Normalize incoming emails (fix #59)

This is to prevent attackers from varying the case of their email
addresses to work-around rate-limiting.