username can be lowercased