email is case sensitive and accepts invalid emails.

[taterhead247]

In the Auth databased, my email is D***.V***@gmail.com (upper case D and V, rest lower case.

1. If I try to log in with Damon@damon, it accepts the "email" and tries to send a code. Need to make the field verification more restrictive.
2. If I enter d*.v*@gmail.com (or any email that is a capitalization variation of the one in the system) it tries to create a new user. Maybe do a ToLower()?