login is now case-insensitive