Be case-insensitive about usernames in password reset