make username comparison case insensitive in auth