Preserve case of username in scopes[1] so getSession caller can obtain it exactly (required when case-sensitive external authorization is being used)

Preserve case of username in scopes[1] so getSession caller can obtain it exactly (required when case-sensitive external authorization is being used) #436