compare password hashes when logging in,
store and check user email in lower case