fix(password): case-insensitive emails in forgot-password