TokenProvider.createToken is case sensitive

in contrast to the previous implementation (as exposed in the compatibility mode) and the way it is implemented in Oak the backport introduces a case-sensitive check for the userID extracted from the credentials matches the ID obtained from User.getID.

this is an unintended and not very useful regression as the lookup for users is case insensitive.