don't rely upon DB case insensitive comparisons for tenant, username, email or mobile phone