fix(*): allow case-insensitive email for pw reset
A user tried to use password reset with a email that had an uppercase letter, so they received an email saying their account didn't exist. This makes sure the email is lower case before looking up the identity.