update the emails to note the expiration of links
downcase the username so the request will be valid based on spec fixes #23