Comment by Operyl

The big problem was case sensitivity in my opinion. It should have been case insensitive with discriminators. The current system means bob#1234 is a different user from Bob#1234.