login downcase sanitization