SuPerAdmiN user can be registered, but never authenticated

Although superadmin case-variations can be used as valid usernames in the registration process, the authenticator always detects this as the superadmin user. The registration method should be changed to reject these values from the start.