Fix authentication method

Since you match with `LOWER()` you should also `.downcase` what you receive.  The API documentation doesn't describe this caveat, so I'm assuming it's a bug.

Also, this is 1000000000% untested, since, y'know, there's no test db or anything.

(P.S. - first pull request GET)