Username case-insensitive authentication backend

closes #23