Auto-convert loginnames to lowercase on login and password reset

For password reset this prevents circumventing the loginname/email-based ratelimit.

Closes #67 (closed)