toUppercase() passwords retrieved from User object when comparing to client hash in ident() methods... because I dunno