logins are now always lowercase