login: ignore case for username