when checking for the password the email should be put through tolowercase before comparing because no one remembers when one used upper and lowercase and as it doesnt matter in emails what you spell upper and lower case; most services ignore that already and so should codimd.